Overview

overview

10

Static

static

10

archnj1604.exe

windows7-x64

10

archnj1604.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    archnj1604.exe

  • Size

    37KB

  • MD5

    9c9d019a792a0cad13bf8b053e632c19

  • SHA1

    219ee889a2496f5aab4ba06976d55515f464bd44

  • SHA256

    f39cc7eda8a6de1b306db1c77ed8a9fa0b59d3c592ffb87fca612c950fd4619e

  • SHA512

    911cb7e1cd54e11acaf541bdc0ed80a537158cb7eb2c12f988995e58e9e40ceb54db43e65a0b49383aea13b78e89cd4110d0bd32f0be287513cbde8e898b4ffd

  • SSDEEP

    384:5WS3hUidkwXR21cGMy8P0QxvzIFlyYdQrAF+rMRTyN/0L+EcoinblneHQM3epzX7:sS3PLGv8P0QxUiYarM+rMRa8Nu2Qt

Score
10/10
huynjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

huy

C2

account-stevens.at.ply.gg:38489

Mutex

72b5cc7dfa4fbc45c48311925d3b86dd

Attributes
  • reg_key

    72b5cc7dfa4fbc45c48311925d3b86dd

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • archnj1604.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections